In this episode of the podcast (#233) Mark Stanislav, a Vice President at the firm Gemini, joins Paul to talk about what went wrong with disclosure of Log4Shell, the critical, remote code execution flaw in the Log4j open source library. Mark talks about how the Internet community can come together ahead of the next vulnerability to make sure the mistakes that are evident in the response to Log4j aren’t repeated. 

The post Episode 233: Unpacking Log4Shell’s Un-coordinated Disclosure Chaos appeared first on The Security Ledger with Paul F. Roberts.